Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/fN8fa7ozPQ5m74ttWUFKBBiIQSc.roa
File: fN8fa7ozPQ5m74ttWUFKBBiIQSc.roa (raw, json)
Hash identifier: JResCQGe6T+nLKqGjLFvLBJ3SMA0WiHLKq1Aux/XqUI=
Subject key identifier: 7C:DF:1F:6B:BA:33:3D:0E:66:EF:8B:6D:59:41:4A:04:18:88:41:27
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 019E016F7852C4DC4CCB0496F95538037C03
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/fN8fa7ozPQ5m74ttWUFKBBiIQSc.roa
Signing time: Thu 07 May 2026 07:55:42 +0000
ROA not before: Thu 07 May 2026 07:55:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49377
IP address blocks: 178.249.56.0/24 maxlen: 24
178.249.57.0/24 maxlen: 24
178.249.58.0/24 maxlen: 24
178.249.59.0/24 maxlen: 24
178.249.60.0/24 maxlen: 24
178.249.61.0/24 maxlen: 24
188.94.48.0/24 maxlen: 24
188.94.49.0/24 maxlen: 24
188.94.50.0/24 maxlen: 24
188.94.51.0/24 maxlen: 24
188.94.53.0/24 maxlen: 24
188.94.54.0/24 maxlen: 24
188.94.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:6f:78:52:c4:dc:4c:cb:04:96:f9:55:38:03:7c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: May 7 07:55:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cdf1f6bba333d0e66ef8b6d59414a0418884127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:81:39:e6:d1:81:aa:46:64:8f:f5:48:b9:
86:e3:70:b4:8d:dd:7b:ac:62:bc:50:3e:d4:06:61:
22:62:5e:99:77:27:6d:06:8b:42:db:d6:3d:15:df:
37:d9:7a:29:70:2b:52:f5:e7:bf:2d:17:70:b4:f3:
4c:c9:a5:dd:c5:88:db:ca:d9:bc:8f:b9:30:d1:ab:
ca:63:89:2a:67:4c:1a:2e:c0:50:6a:14:0b:9b:0b:
75:38:c2:6e:77:50:87:14:8a:cf:5f:6f:b4:03:63:
9e:81:c3:dc:6a:82:f8:0c:01:3c:88:11:97:8f:8e:
56:eb:2c:fc:34:7d:52:22:02:fc:f7:72:05:b8:a2:
7d:6f:11:33:24:0b:8f:c4:4c:66:f5:84:52:df:56:
f3:be:df:c9:f3:18:a1:67:7b:54:ba:f7:63:e3:bf:
a9:cc:1e:6c:ea:fe:52:cc:28:91:77:c1:59:92:21:
fe:04:75:be:89:a9:69:e2:c0:cd:a5:24:4f:e6:53:
ea:ac:0b:eb:57:c4:4e:70:1e:60:f2:1a:c8:04:b8:
7f:ef:be:25:18:61:05:40:fa:cf:db:25:61:8b:e2:
83:3c:2f:bf:9a:37:cf:d2:5b:dc:8f:34:21:8d:2d:
0f:c8:39:7b:fc:8e:08:10:8f:99:15:58:28:e6:50:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DF:1F:6B:BA:33:3D:0E:66:EF:8B:6D:59:41:4A:04:18:88:41:27
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/fN8fa7ozPQ5m74ttWUFKBBiIQSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.56.0-178.249.61.255
188.94.48.0/22
188.94.53.0-188.94.55.255
Signature Algorithm: sha256WithRSAEncryption
82:a0:bd:90:cc:62:50:d0:cb:ff:ed:b0:63:81:5e:d3:3a:5c:
08:ed:f3:95:8f:f7:88:ec:35:f2:cb:41:99:a7:9e:4e:b4:30:
03:3d:23:ff:7b:ae:11:37:0f:36:07:7b:66:5b:f7:0c:cc:ae:
13:1e:61:2a:58:e4:14:bc:3b:37:27:67:32:62:36:ee:00:10:
2d:83:64:5b:3e:1c:51:2f:c8:00:b1:3b:e0:82:f1:74:8b:9a:
8f:10:14:26:3a:23:65:ae:31:50:e6:a2:b4:c0:8f:66:af:df:
53:44:63:13:c0:fe:1c:c1:de:17:f7:9d:22:74:dd:bb:52:7d:
6c:20:1b:61:42:dc:a4:a5:e8:bd:4e:b3:59:34:58:a6:7a:6f:
cc:f7:05:55:cc:8d:4c:14:fa:f2:3b:6c:75:0d:b9:7a:1c:6e:
fb:14:24:89:2c:7c:e9:92:52:b6:94:e7:0f:0e:1f:04:ab:aa:
30:1d:17:ba:4b:b0:f1:57:05:38:36:60:91:6e:aa:fc:92:24:
56:bf:bb:dc:53:71:c6:2b:f4:42:9b:9a:6d:5b:0d:a9:d9:f8:
a7:69:11:01:7b:da:de:ec:6e:e3:8c:11:87:7e:48:00:b1:4c:
36:89:4a:ef:e4:52:03:02:48:2b:1b:23:04:c0:1a:28:53:68:
71:ab:0b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:28 2026 by rpki-client